Container Runtimes

Docker

rkt

Reference

Using systemd drop-in units

There are two methods of overriding default Container Linux settings in unit files: copying the unit file from /usr/lib64/systemd/system to /etc/systemd/system and modifying the chosen settings. Alternatively, one can create a directory named unit.d within /etc/systemd/system and place a drop-in file name.conf there that only changes the specific settings one is interested in. Note that multiple such drop-in files are read if present.

The advantage of the first method is that one easily overrides the complete unit, the default Container Linux unit is not parsed at all anymore. It has the disadvantage that improvements to the unit file supplied by Container Linux are not automatically incorporated on updates.

The advantage of the second method is that one only overrides the settings one specifically wants, where updates to the original Container Linux unit automatically apply. This has the disadvantage that some future Container Linux updates might be incompatible with the local changes, but the risk is much lower.

Note that for drop-in files, if one wants to remove entries from a setting that is parsed as a list (and is not a dependency), such as ConditionPathExists= (or e.g. ExecStart= in service units), one needs to first clear the list before re-adding all entries except the one that is to be removed. See below for an example.

This also applies for user instances of systemd, but with different locations for the unit files. See the section on unit load paths in official systemd doc for further details.

Example: customizing fleet.service

Let's review /usr/lib64/systemd/system/fleet.service unit (you can find it using this command: systemctl list-units | grep fleet) with the following contents:

Let's walk through increasing the RestartSec parameter via both methods:

Override only specific option

You can create a drop-in file /etc/systemd/system/fleet.service.d/10-restart_60s.conf with the following contents:

[Service]
RestartSec=60s

Then reload systemd, scanning for new or changed units:

systemctl daemon-reload

And restart modified service if necessary (in our example we have changed only RestartSec option, but if you want to change environment variables, ExecStart or other run options you have to restart service):

systemctl restart fleet.service

Here is how that could be implemented within a Container Linux Config:

This is the human-readable config file. This should not be immediately passed to Container Linux. Learn more.

# This config is meant to be consumed by the config transpiler, which will# generate the corresponding Ignition config. Do not pass this config directly# to instances of Container Linux.systemd:units:-name:fleet.serviceenable:truecontents:|[Unit]Description=fleet daemonAfter=etcd.serviceAfter=etcd2.serviceWants=fleet.socketAfter=fleet.socket[Service]ExecStart=/usr/bin/fleetdRestart=alwaysRestartSec=60s

This is the raw machine configuration, which is not intended for editing. Learn more. Validate the config here.